Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ujKG9HGjPgmFHbrMPs5LcnIUBWA.roa
File: ujKG9HGjPgmFHbrMPs5LcnIUBWA.roa (raw, json)
Hash identifier: uHAnF5WxBROfxd4Etnf/1MftByLUZsyaqEbnvSpo/m0=
Subject key identifier: BA:32:86:F4:71:A3:3E:09:85:1D:BA:CC:3E:CE:4B:72:72:14:05:60
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 066C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ujKG9HGjPgmFHbrMPs5LcnIUBWA.roa
Signing time: Thu 15 May 2025 15:38:09 +0000
ROA not before: Thu 15 May 2025 15:38:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1644 (0x66c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 15:38:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BA3286F471A33E09851DBACC3ECE4B7272140560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:0a:51:af:35:f1:bc:8b:93:25:d3:bc:28:
26:3d:ad:49:58:76:1b:7e:3b:90:0e:42:f7:0c:4d:
f2:ae:3c:3e:cf:0c:11:7a:ab:3b:8d:42:39:81:26:
10:a8:37:ce:03:ed:f8:ea:c4:a4:98:8b:3b:00:96:
f6:36:9f:67:fc:d1:69:b1:5e:e4:35:a0:6a:95:10:
0a:21:2e:fe:bb:6f:c5:3a:15:2e:f4:e1:d1:46:22:
58:a9:7c:75:f6:a7:b3:34:83:5d:79:be:4d:6f:4d:
14:fd:0d:b3:8d:a4:5c:0f:8e:69:91:4d:c0:da:44:
ad:e7:02:c2:da:6e:bc:38:86:21:db:db:1d:d1:9a:
e0:9d:5c:56:3e:df:fa:be:ab:86:fa:f1:6f:bc:96:
78:10:ea:e5:cf:48:60:f3:41:dc:8e:cf:4a:86:64:
18:8d:e1:e0:91:58:d2:a0:df:a5:28:2b:9b:a4:e5:
8a:f8:4e:34:fc:1a:f6:d3:d8:14:b6:44:7e:c9:58:
c2:68:e6:be:9d:03:6e:3a:c2:96:02:66:c1:9c:67:
c2:88:b4:6a:cb:c9:87:38:12:4e:12:92:de:90:f6:
1e:6a:33:6d:ce:e5:4c:6c:7e:22:09:6f:d7:72:a1:
90:18:94:a9:c0:37:88:f4:c9:03:07:a5:c6:7c:33:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:86:F4:71:A3:3E:09:85:1D:BA:CC:3E:CE:4B:72:72:14:05:60
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ujKG9HGjPgmFHbrMPs5LcnIUBWA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:78:a6:ea:1c:f9:a7:c0:af:0b:a4:8a:20:ba:f0:fb:d7:29:
4f:cb:66:47:e3:ca:ca:90:f2:d4:18:af:06:44:2e:d7:91:76:
7f:11:fc:91:7f:e9:34:72:a4:4e:c6:22:5b:ff:91:ce:a9:a1:
0b:b3:9d:93:34:51:78:d7:b6:36:4d:2b:e1:66:ae:1d:8a:a9:
ee:32:03:77:df:12:f4:5e:53:31:ff:f0:57:40:e6:21:38:ce:
d4:9b:68:d4:f6:37:0c:91:a8:3d:1d:fa:bc:6d:8a:2b:22:9b:
cf:73:97:d1:a0:c8:22:cd:0f:9d:20:1c:15:85:8a:16:e8:29:
c6:72:8b:fa:ed:ca:73:df:df:e0:4c:f9:0e:2b:bb:7d:be:20:
a6:48:bb:5d:11:25:22:10:8d:bb:74:cb:70:2b:94:7c:bb:41:
9c:8f:bd:62:c7:89:96:3b:d4:7f:1d:5d:dc:3e:44:f4:65:3f:
38:55:8f:9f:97:15:c1:b8:54:6f:1d:43:1b:ba:ee:88:09:b6:
26:2d:bf:58:f0:9f:09:6a:cd:e8:f3:d7:63:fe:02:22:00:df:
26:08:09:7d:07:ec:26:5f:ae:e2:c2:af:dd:93:5b:3d:2e:12:
13:9a:20:9e:64:c3:b3:79:ca:12:6c:ee:5f:9d:66:d2:c1:c9:
6e:6a:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:11 2025 by rpki-client